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Top Stories 

• Ice storms throughout Texas caused the cancellation of the Dallas Marathon and shut off 
power to nearly 267,000 people. - Associated Press (See item 2) 

• Cold, ice, and snow throughout the U.S. caused hundreds of flight delays and prompted at 
least 5 States to declare states of emergency - Associated Press; NBC News; Reuters (See 
item 9) 

• The U.S. FDA is investigating robotic surgery systems used at three Maine hospitals 
following a manufacturer’s recall in November 1 1 due to potential issues with units stalling 
during procedures. - Bangor Daily News (See item 16) 

• Microsoft teamed up with the FBI, Interpol, Europol, and industry partners to disrupt the 
ZeroAccess click-fraud botnet. - The Register (See item 24) 
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Energy Sector 



1. December 6, Associated Press - (Arkansas) More than 27,000 without power in 
Arkansas. Utility crews in Arkansas worked to restore power December 6 to more than 
27,000 homes and businesses after severe weather knocked out service. 

Source: http://thecabin.net/news/2013-12-06/more-27000-without-power-arkansas 

2. December 6, Associated Press - (Texas) Sunday's Dallas Marathon canceled due to 
ice storm. An ice storm in parts of Texas December 6 prompted the cancellation of the 
Dallas Marathon and left nearly 268,000 customers in the Dallas-Fort Worth area 
without power. 

Source: http://www.khou.com/news/national/23473003 1 .html 

3. December 6, WSAZ 3 Huntington - (Kentucky) Explosion levels gas station in 
Grayson, Ky. A Somerset Oil Inc., station in Grayson closed down December 5 after 
an explosion left the gas station a total loss. Workers were removing gas tanks when 
they may have hit a natural gas line that caused a leak. 

Source: http://www.wsaz.com/home/headlines/Gas-Tank-Explosion-Reported-in- 
Grayson-Ky-23466433 1 .html 



For another story, see item 9 
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Chemical Industry Sector 

For another story, see item 26 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

4. December 6, U.S. Department of Labor - (New York) Uncorrected and recurring 
hazards at Victor, NY, manufacturing plant lead to $131,600 in additional U.S. 
Labor Department OSHA fines. The U.S. Department of Labor levied $131,600 in 
fines against optical equipment manufacturer Wordingham Machine Co., for failing to 
correct seven previously-cited serious safety hazards at their Syracuse plant. 
Source: https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS 
RELEASES &p id=25200 
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For another story, see item 26 
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Defense Industrial Base Sector 



For another story, see item 26 
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Financial Services Sector 

5. December 6, IDG News Service - (International) PayPal DDoS attackers plead 
guilty, some may walk free. Fourteen defendants accused of participating in a 
distributed denial of service (DDoS) attack against PayPal in 2010 pleaded guilty in 
U.S. District Court in California to related charges December 5. 

Source: http://www.networkworld.com/news/2013/120613-pavpal-ddos-attackers- 
plead-guilty-276668.html 

6. December 6, Softpedia - (International) Citadel malware variant captures 
screenshots of Bitcoin- related websites. Trusteer researchers identified a variant of 
the Citadel malware that is capable of capturing screenshots when a user accesses Web 
sites associated with buying, storing, or trading Bitcoins. 

Source: http://news.softpedia.com/news/Citadel-Malware-Variant-Captures-Screenshots-of- 
Bitcoin-Related-Websites-40675 1 .shtml 

7. December 5, Softpedia - (International) Researchers analyze Dexter and Project 
Hook PoS malware campaigns. Researchers at the Arbor Security Engineering and 
Research Team published a paper analyzing point-of-sale (PoS) malware campaigns 
utilizing the Dexter and Project Hook malware. The paper identified three variants of 
Dexter, one of which is capable of stealing data via FTP, among other findings. 

Source: http://news.softpedia.com/news/Researchers-Analyze-Dexter-and-Proiect- 
Hook-PQS-Malware-Campaigns-406301 .shtml 

[ Return to top ] 

Transportation Systems Sector 

8. December 6, inForney.com - (Texas) Icy conditions to blame for two back-to-back 
accidents on IH 20. Icy conditions caused two separate roll-over accidents on 
Interstate Highway 20 in Kaufman County closing the left lane for over 3 hours 
December 5. 

Source: http://infomev.com/local-news/item/1456-icv-conditions-to-blame-for-two- 
back-to-back-accidents-on-ih-20 

9. December 6, Associated Press; NBC News; Reuters - (National) Frozen nation: Cold, 
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ice and snow grip US, threatening roads and power. Freezing winter storms and 
weather across the U.S. caused the delay of hundreds of flights December 6, including 
more than 500 flight delays at the Dallas-Fort Worth airport, left an estimated 250,000 
people without power, and prompted at least 5 State governors to declare states of 
emergency. 

Source: http://usnews.nbcnews.com/ news/201 3/1 2/06/2 1787 171 -frozen-nation-cold- 
ice-and-snow-grip-us-threatening-roads-and-power 

10. December 6, News 12 Long Island - (New York) Hazmat crews respond to fire at 
Uniondale UPS center. HAZMAT teams responded to a fire and chemical spill at a 
UPS center in Uniondale that prompted the evacuation of the facility December 6. 
Source: http://longisland.newsl2.com/news/fire-forces-evacuation-of-uniondale-ups- 
center- 1.6552854 



11. December 5, WEEK-TV 25 Peoria - (Illinois) One person injured anhydrous 
ammonia explosion. The driver of a semi-truck was injured when a tank filled with 
anhydrous ammonia tipped over on its side and exploded on Route 40 in Northern 
Peoria County, prompting the closure of the intersection for several hours as crews 
worked to clear the scene December 5. 

Source: http://www.cinewsnow.com/news/local/One-person-iniured-in-anhydrous- 
ammonia-explosion-23459492 1 .html 

12. December 5, Detroit News - (Michigan) U.S. approves $41.6 million for Detroit bus 
projects. The Federal Transit Administration announced December 5 the approval of 
$41.6 million in funding for the Detroit Department of Transportation (DDOT) to 
overhaul 60 buses, acquire security equipment, and improve facilities. The overhaul 
also includes preventative maintenance to transit support facilities and vehicle 
maintenance in an effort to improve the state of DDOT. 

Source: 

http://www.detroitnews.eom/article/20131205/METRQ01/312050115/1361/U.S.- 

approves-$41.6-million-for-Detroit-bus-projects 

13. December 5, Las Vegas Sun - (Nevada) Gunman opens fire at downtown Las Yegas 
bus terminal. A gunman was arrested without incident after he opened fire on a group 
of security guards at a Greyhound bus station by the Fremont Street Experience in Las 
Vegas December 6. 

Source: http://www.lasvegassun.com/news/2013/dec/05/gunman-opens-fire-guards- 
greyhound-station-near-fr/ 
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Food and Agriculture Sector 

14. December 6, KSHB 41 Kansas City - (Kansas) Three injured in explosion at KCK 
baking products factory. An explosion and fire inside the Caravan Ingredients 
Factory in Kansas City, Kansas, December 6 injured three people and required 
HAZMAT crews to assist at the scene due to chemicals used at the business. 
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Source: http://www.kshb.com/dpp/news/region kansas/kck/three-iniured-in-explosion- 
at-kck-baking-products-factory 
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Water and Wastewater Systems Sector 

15. December 5, New Baltimore Voice - (Michigan) Marysville to spend $250,000 to 
monitor flow through storm sewers. The City of Marysville approved $250,000 to 
monitor storm water flow through the city’s retention basins and wastewater treatment 
plant to avoid dumping under-treated sewage into the St. Clair River during heavy rainfall. 
Source: 

http://www.voicenews.com/articles/2013/12/05/news/doc5298cae25c792805348387.txt 
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Healthcare and Public Health Sector 

16. December 6, Bangor Daily News - (International) FDA investigating surgical robots 
used at three Maine hospitals. Intuitive Surgical Inc., the maker of the $1.5 million da 
Vinci robotic surgery system, issued a recall November 1 1 alerting customers of potential 
issues with the medical device affecting up to 1,386 of the instrument arms worldwide. The 
U.S. Food and Drug Administration is investigating the surgical robot used by three Maine 
hospitals following reports that the units may stall during procedures. 

Source: http://bangordailynews.com/2013/12/05/health/fda-investigating-surgical- 
robots-used-at-three-maine-hospitals/ 

17. December 5, Press Trust of India - (International) Jubilant Life Sciences gets warning 
letter from USFDA. The U.S. Food and Drug Administration issued a warning letter to a 
Jubilant Life Sciences Ltd-owned manufacturing facility, Jubilant HollisterStier, LLC in 
Spokane, Washington, due to a violation of manufacturing norms. 

Source: http://www.monevcontrol.com/news/business/jubilant-life-sciences-gets- 
waming-letterusfda- 1002905.html 

For another story, see item 19 
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Government Facilities Sector 

18. December 6, Norfolk Virginian-Pilot - (Virginia) Navy SEAL charged with selling 

ammunition. Authorities arrested and charged a U.S. Navy SEAL December 4 with taking 
ammunition, grenades, and guns during field exercises and selling them for personal profit 
after U.S. Naval Criminal Investigative Service agents purchased several items from him 
during an undercover operation. 

Source: http://hamptonroads.com/2013/12/navv-seal-charged-selling-ammunition 
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19. December 5, Associated Press - (International) Russian diplomats accused of $1.5M 
Medicaid fraud. Federal prosecutors announced December 5 that 25 current and former 
Russian diplomats and 24 of their spouses were charged with allegedly lying about their 
incomes in order to defraud the U.S. Medicaid program of about $1.5 million since 2004. 
Source: http://www.usatodav.com/story/news/world/2013/12/05/medicaid-fraud-russia- 
diplomats/3878619/ 

20. December 5, Indianola Record Herald and Tribune - (Iowa) No bomb found after threat 
prompts Indianola High School evacuation. Indianola High School in Iowa was 
evacuated and classes were dismissed December 5 after a threatening note was found in the 
girls’ bathroom. Police searched the building and cleared the scene after nothing suspicious 
was found. 

Source: 

http ://ww w .desmoinesregister .com/article/20 131 205/NEW S/131 205009/Breaking- 
Indianola-High-School-evacuated-as-bomb-squad-deployed 

21. December 5, Associated Press - (Idaho) Dump truck collides with Idaho school bus; 1 
child dead, 4 injured. One child was killed and four others were injured December 5 after 
a Kuna School District bus and a dump truck collided in Canyon County, Idaho. 

Source: http://abclocal.go.com/wls/storv?section=news/national world&id=9350322 

22. December 5, Watertown Daily Times - (New York) Search effort called off for Reaper 
drone that crashed into Lake Ontario. Officials ended the search December 3 for a MQ- 
9 Reaper aircraft that crashed November 12 in Lake Ontario after crews were unsuccessful 
in their searches. U.S. Air Force investigators are continuing their review of the cause of 
the crash. 

Source: http : //www. watertowndaily times .com/article/20 131 205/NEW S03/7 1 2059909 
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Emergency Services Sector 

23. December 5, Olympia Olympian - (Washington) Wash, man takes fire dept. SUY on 
joyride. A man led police officers on a high-speed chase after stealing an unlocked 
Olympia Fire Department command vehicle at the fire department’s headquarters 
December 3. The suspect drove over a spike strip laid on the roadway in Tenino by 
officers, which caused the vehicle to skid off the road before coming to a stop. 

Source: http://www.firehouse.eom/news/l 1267174/wash-man-takes-fire-dept-suv-on- 
joyride 
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Information Technology Sector 

24. December 6, The Register - (International) Microsoft teams up with Feds, Interpol 
in ZeroAccess botnet zombie hunt. Microsoft, in cooperation with the FBI, Interpol, 
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Europol, and industry partners, launched an effort to disrupt the ZeroAccess click- 
fraud botnet using sinkholing and other means. The click-fraud operations run by the 
botnet cost advertisers an estimated $2.7 million per month. 

Source: http://www.theregister.co.uk/2013/12/06/zeroaccess zombienet takedown/ 

25. December 6, The Register - (International) Fiendish CryptoLocker ransomware 
survives hacktivists’ takedown. Members affiliated with hacktivist group Malware 
Must Die attempted to disable command and control servers associated with the 
CryptoLocker ransomware, suspending 138 targeted domains but failing to eliminate 
the operation. 

Source: http://www.theregister.co.uk/2013/12/06/crvptolocker takedown fizzles/ 

26. December 6, Threatpost - (International) Siemens patches authentication bypass 
flaw in SINAMICS ICS software. Siemens issued a patch that addresses a serious 
remotely exploitable vulnerability in its SINAMICS S/G industrial control systems 
(ICS) software that could allow unauthenticated arbitrary actions to be performed. 
SINAMICS S/G products with firmware versions prior to 4.6.11 are affected. 

Source: http://threatpost.com/siemens-patches-authentication-bypass-flaw-in- 
sinamics-ics-software/103119 



27. December 5, IDG News Service - (International) Android flashlight app developer 
settles FTC charges of sharing geolocation data. Goldenshores Technologies 
agreed to a settlement with the U.S. Federal Trade Commission over the company’s 
Brightest Flashlight Free app for Android devices that shared its users’ geolocation 
data with advertising networks without users’ consent. 

Source: http://www.networkworld.com/news/2013/120513-android-flashlight-app- 
developer-settles-276642.html 

For additional stories, see items 5, 6, and 7 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

28. December 6, FierceTelecom - (National) FCC’s Connect America Fund to expand 
broadband to nearly 400,000 rural homes and businesses in 41 States. The 

Federal Communications Commission December 6 authorized $255 million in 
funding to provide broadband Internet access to rural areas in 41 States. 

Source: http://www.fiercetelecom.com/press-releases/fccs-connect-america-fund- 
expand-broadband-nearly-400000-rural-homes-and-bu 
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29. December 5, U.S. Department of Labor - (Mississippi) Louisiana cellular tower 
company cited by US Department of Labor's OSHA following worker fatality. 

The U.S. Department of Labor's Occupational Safety and Health Administration 
proposed penalties totaling $50,400 and cited Custom Tower LLC of Scott, 

Louisiana, for one willful safety violation following the death of a worker who fell 
approximately 125 feet while attempting to install a microwave dish on a cellular 
tower along Highway 149 in Louise. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=25206 
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Commercial Facilities Sector 

1. December 6, WCAU 10 Philadelphia - (Pennsylvania) OSHA ends investigation of 
deadly Center City building collapse. An investigation into a Philadelphia building 
collapse June 5 that killed 6 people and injured 13 others concluded with maximum 
fines of $313,000 for Campbell Construction and an $84,000 penalty against S&R 
Contracting for numerous egregious and willful violations. Two individuals involved 
were also penalized. 

Source: http://www.nbcphiladelphia.com/news/local/OSHA-Ends-Investigation-of- 
Deadly-Center-City-Building-Collapse-23466533 1 .html 

2. December 5, Forum News Service - (North Dakota) Minot apartment complex fire 
damage estimated at $12 million. A fire that broke out at the Chateau Apartments 
December 5 in Minot that was under-construction caused about $12 million in 
damages. 

Source: http ://www . grandforksherald.com/event/article/id/2796 17/ 

3. December 5, San Gabriel Valley Tribune - (California) 12 people affected after 
ammonia spill in Industry. A chemical spill when a bottle of ammonium hydroxide 
was dropped from a delivery truck outside a Physician’s Formula facility in Industry, 
California, prompted the evacuation of nearby buildings, and sent two people to the 
hospital while firefighters treated 10 others at the scene. 

Source: http://www.sgvtribune.com/general-news/201312Q5/12-people-affected-after- 
ammonia-spill-in-industry 

For another story, see item 1 
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Dams Sector 

4. December 6, Queens Campaigner - (New York) Howard Beach to receive $50 
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million from feds for storm protection. The Howard Beach area of New York City 
will receive $50 million from the federal government to provide storm protection 
after the area was damaged by Hurricane Sandy. Projects will include re-contouring 
and restoring vegetation, excavation, and creating a self-sustaining system of wave 
barriers to reduce storm damage along 150 acres of waterfront. 

Source: http://www.queenscampaigner.com/2013/12/howard-beach-to-receive-50m- 
from-feds-for-storm-protection/ 

5. December 6, Franklin News Post - (Virginia) Pigg River Dam removal nearly 
complete. Crews contracted by the U.S. Fish and Wildlife Service began the process 
of removing a low-head dam on the Pigg River near Rocky Mount to eliminate a 
dangerous hydraulic issue and create additional room for recreational river use. 
Source: http://www.thefranklinnewspost.com/article.cfm?ID=26277 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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